Differential D50798

pf: add a generic packet rate matching filter
Needs ReviewPublic
Actions

Authored by kp on Wed, Jun 11, 7:40 PM.

Tags

None

Referenced Files

	Unknown Object (File)
	Fri, Jul 4, 1:23 AM

	Unknown Object (File)
	Tue, Jul 1, 7:21 PM

	Unknown Object (File)
	Sun, Jun 29, 4:58 AM

	Unknown Object (File)
	Sat, Jun 28, 7:04 PM

	Unknown Object (File)
	Thu, Jun 26, 11:03 PM

	Unknown Object (File)
	Wed, Jun 25, 7:11 PM

	Unknown Object (File)
	Wed, Jun 25, 7:03 PM

	Unknown Object (File)
	Wed, Jun 25, 12:52 AM

View All 22 Files

Subscribers

vegeta_tuxpowered.net

Details

Reviewers

None

Group Reviewers

Summary

allows things like
pass in proto icmp max-pkt-rate 100/10
all packets matching the rule in the direction the state was created are
taken into consideration (typically: requests, but not replies).
Just like with the other max-*, the rule stops matching if the maximum is
reached, so in typical scenarios the default block rule would kick in then.
with input from Holger Mikolon
ok mikeb

Obtained from: OpenBSD, henning <henning@openbsd.org>, 5a4ae9a9cb
Sponsored by: Rubicon Communications, LLC ("Netgate")

Diff Detail

Repository

rG FreeBSD src repository

Lint

Lint Skipped

Unit

Tests Skipped

Build Status

Buildable 64766
Build 61650: arc lint + arc unit

Event Timeline

kp created this revision.Wed, Jun 11, 7:40 PM

Herald added subscribers: ziaee, vegeta_tuxpowered.net, glebius and 4 others. · View Herald TranscriptWed, Jun 11, 7:40 PM

kp requested review of this revision.Wed, Jun 11, 7:40 PM

Harbormaster completed remote builds in B64766: Diff 156838.Wed, Jun 11, 7:40 PM

kp added a parent revision: D50797: pf: use counter_rate() for rate checking.Wed, Jun 11, 7:40 PM

Revision Contents
Changeset List

Path

Size

lib/

libpfctl/

15 lines

34 lines

sbin/

pfctl/

24 lines

3 lines

share/

man/

man5/

19 lines

sys/

net/

1 line

netpfil/

pf/

11 lines

4 lines

1 line

13 lines

Diff 156838

lib/libpfctl/libpfctl.h

Loading...

lib/libpfctl/libpfctl.c

Loading...

sbin/pfctl/parse.y

Loading...

sbin/pfctl/pfctl_parser.c

Loading...

share/man/man5/pf.conf.5

Loading...

sys/net/pfvar.h

Loading...

sys/netpfil/pf/pf.c

Loading...

sys/netpfil/pf/pf_ioctl.c

Loading...

sys/netpfil/pf/pf_nl.h

Loading...

sys/netpfil/pf/pf_nl.c

Loading...